continuous-testing

The code is intended as an affected-test runner, but it contains a significant command-injection vulnerability because Git-controlled filenames are interpolated into shell commands executed by `execSync`. A malicious commit or repository filename could execute arbitrary commands in CI or on a developer workstation. Use non-shell argument arrays or `spawnSync` with `shell:false`, and escape grep patterns or avoid shell grep entirely. The code does not itself show malware, but the security risk is high in repositories where untrusted changes can reach the script.